Your privacy matters to xyz88. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a player on the xyz88 platform in the Philippines.
Summary: xyz88 collects only the personal data necessary to operate a safe, compliant, and enjoyable gaming platform for Filipino players. We do not sell your personal data to third parties. We protect your information using industry-standard security measures and give you meaningful control over how your data is used.
This Privacy Policy ("Policy") describes how xyz88 ("xyz88," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("you," "Player," or "User") who access or use the xyz88 platform at https://xyz88.win and all associated services (collectively, the "Platform").
xyz88 is committed to protecting the privacy and personal data of all players in accordance with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. By registering for an account or using the xyz88 Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
This Policy should be read together with the xyz88 Terms and Conditions, which govern your use of the Platform. Capitalised terms not defined in this Policy have the meanings given to them in the Terms and Conditions.
xyz88 collects the following categories of personal data from players and Platform users:
| Category | Examples |
|---|---|
| Identity Data | Full name, date of birth, government-issued ID number, nationality |
| Contact Data | Email address, mobile number, residential address (city, province) |
| Account Data | Username, encrypted password, account preferences, communication settings |
| Financial Data | GCash number, PayMaya account, bank account details (BPI, BDO, Metrobank), transaction history |
| Gaming Data | Game history, bet amounts, win/loss records, session duration, bonus usage |
| Technical Data | IP address, device type, browser type and version, operating system, time zone |
| Usage Data | Pages visited, features used, click patterns, session timestamps |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions |
| Verification Data | Copies of government-issued ID, selfie photographs submitted for KYC verification |
xyz88 does not collect sensitive personal information (as defined under the Data Privacy Act of 2012) unless strictly required for regulatory compliance purposes, in which case such collection will be clearly disclosed to you at the time of collection.
xyz88 collects personal data through the following means:
xyz88 uses your personal data for the following purposes:
Marketing opt-out: You may withdraw your consent to receive marketing communications from xyz88 at any time by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.
xyz88 processes your personal data on the following legal bases under the Data Privacy Act of 2012:
xyz88 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:
No Data Sales: xyz88 will never sell your personal data to data brokers, advertisers, or any other third party for commercial purposes. Any third party that receives your data from xyz88 is contractually bound to use it only for the specific purpose for which it was shared.
xyz88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following types of cookies:
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the xyz88 Platform. xyz88 does not use third-party advertising cookies or cross-site tracking technologies.
xyz88 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
When personal data is no longer required, xyz88 will securely delete or anonymise it in accordance with our data destruction procedures.
xyz88 implements robust technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include:
Your Role in Security: While xyz88 takes every reasonable precaution to protect your data, you also play an important role. Please use a strong, unique password for your xyz88 account, never share your login credentials with anyone, and contact [email protected] immediately if you suspect any unauthorised access to your account.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by xyz88:
To exercise any of the above rights, please contact the xyz88 Data Protection Officer at [email protected]. xyz88 will respond to all data rights requests within fifteen (15) business days of receipt. We may need to verify your identity before processing your request.
21+ Only. The xyz88 Platform is strictly intended for adults aged 21 years and above. xyz88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately delete that data and close the associated account.
If you are a parent or guardian and believe that a minor has registered on the xyz88 Platform or provided personal data to xyz88, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving your report.
xyz88 primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to, or accessed by, service providers located outside the Philippines — for example, cloud infrastructure providers or identity verification services operating in other jurisdictions.
Where such transfers occur, xyz88 ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that impose data protection standards equivalent to those required under Philippine law. xyz88 will not transfer your personal data to any jurisdiction that does not provide an adequate level of data protection without your explicit consent or without implementing appropriate protective measures.
xyz88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, xyz88 will notify registered players by posting a prominent notice on the Platform or by sending an email to the address associated with your account.
The updated Policy will take effect from the date of publication. Your continued use of the xyz88 Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. We encourage you to review this Policy periodically to stay informed about how xyz88 protects your personal data.
If you have any questions, concerns, or complaints regarding this Privacy Policy or xyz88's handling of your personal data, please contact our Data Protection Officer:
Data Protection Officer — xyz88
Email: [email protected]
Support Hours: 24 hours a day, 7 days a week
Response Time: Within 15 business days for data rights requests; within 24 hours for urgent security concerns
If you are not satisfied with xyz88's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent authority responsible for enforcing the Data Privacy Act of 2012. Information about the NPC and how to file a complaint is available through official Philippine government channels.
Your Data, Protected
Privacy at xyz88 is not an afterthought — it is built into every layer of the platform. Here is what that means for you as a Filipino player.
Every piece of data you send to xyz88 — from your login credentials to your GCash details — is protected by TLS encryption in transit and AES-256 encryption at rest. Your information is unreadable to anyone who shouldn't see it.
xyz88 verifies every player's identity and age before allowing real-money play. This protects the entire player community from fraud and ensures that the platform remains a safe, compliant space for Filipino adults aged 21 and above.
xyz88 will never sell your personal data to advertisers, data brokers, or any third party for commercial gain. The data you share with xyz88 stays within xyz88's controlled environment, used only to serve you better.
Under the Data Privacy Act of 2012, you have the right to access, correct, delete, and port your personal data at any time. xyz88 honours all data rights requests within 15 business days — no runaround, no excuses.
xyz88 operates in full compliance with the Philippine Data Privacy Act of 2012 and all applicable gaming regulations. Our data practices are regularly reviewed to ensure they meet the latest legal and regulatory standards.
Have a question about your data? Our support team is available around the clock to address privacy concerns, process data rights requests, and escalate urgent security issues — because your peace of mind cannot wait for business hours.
Play with Confidence
Now that you know exactly how xyz88 handles your personal data, you can play with complete confidence. Join hundreds of thousands of Filipino players who trust xyz88 for fair games, fast GCash payouts, and a platform that genuinely respects their privacy. You must be 21 or older to register.
21+ only. Play responsibly. By registering you confirm you have read and accepted this Privacy Policy.